StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
887
of 17,781 indexed, latest versions
Container images
918
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 887 of 17,781 indexed charts deploy, on 918 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+11 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u574
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0135
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_26
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

887 by stars
ChartLatestAffected imagesRadar Score
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

1,864
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
python3.12@3.12.3-1ubuntu0.8
no fix listed

Open the chart page →

4,854
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

3,539
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python3.10@3.10.12-1~22.04.5
no fix listed

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python3.12@3.12.3-1ubuntu0.15
no fix listed

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
python3.12@3.12.3-1ubuntu0.5
no fix listed

Open the chart page →

5,670
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

4,341
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
python3.11@3.11.2-6+deb12u7
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python3@3.6.8-37.el8
0:3.6.8-78.el8_10

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

5,584
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

1,685
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

11,458
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

1,675
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
python3.6@3.6.9-1~18.04ubuntu1.8
no fix listed

Open the chart page →

6,500
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
python3.12@3.12.3-1ubuntu0.4
no fix listed

Open the chart page →

12,840
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
no fix listed

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

11,662
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
python3.8@3.8.5-1~20.04.3
no fix listed

Open the chart page →

10,231
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
python3.8@3.8.5-1~20.04.2
no fix listed

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
python3.8@3.8.5-1~20.04
no fix listed

Open the chart page →

31,000
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

4,879
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
python3@3.6.8-56.el8_9
0:3.6.8-78.el8_10

Open the chart page →

15,562
geo-checkergeo-checkerVerified publisher5.0.01 of 1See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ymuski/geo-checker:5.0.05ba7fd8c7bdc
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

1,455
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
python3.12@3.12.3-1ubuntu0.8
no fix listed

Open the chart page →

4,132
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

10,072
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

6,374
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

6,095
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
python3.10@3.10.12-1~22.04.10
python3.11@3.11.0~rc1-1~22.04
no fix listed
no fix listed

Open the chart page →

12,397
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

11,764
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

10,701
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

1,270
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

4,802
powerdns-recursorklicktippVerified publisher0.4.101 of 1See more

powerdns-recursor klicktipp 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

1,873
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.2fe71c5214fdc
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

2,049
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
python3.9@3.9.18-3.el9_4.5
0:3.9.25-7.el9_8.3

Open the chart page →

12,019
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
python3.10@3.10.12-1~22.04.15
no fix listed

Open the chart page →

9,858
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

12,422
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

3,544
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
python-3.13@3.13.7-r0
3.13.14-r2

Open the chart page →

4,292
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,201
prometheus-pve-exporterm0nsterrr-prometheus-pve-exporterVerified publisher2.7.01 of 1See more

prometheus-pve-exporter m0nsterrr-prometheus-pve-exporter 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

348
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
python3.12@3.12.3-1ubuntu0.5
no fix listed

Open the chart page →

13,479
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
python3.12@3.12.3-1ubuntu0.3
no fix listed

Open the chart page →

4,137

Container images carrying it

918 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed
11
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed
10
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
no fix listed
8
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
7
oomk8s/readiness-check:2.0.07daa08b81954
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
no fix listed
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
python3@3.12.12-r0
3.12.14-r0
4
library/rabbitmq:3.11-managementc3f70098e01d
python3.10@3.10.12-1~22.04.3
no fix listed
4
mastercloudapps/server:v2.23f3d24dfe2686
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
4
quay.io/strimzi/operator:0.37.052f376e64b9b
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed
3
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
no fix listed
3
library/node:ltsbe23f54a88d3
python3.11@3.11.2-6+deb12u8
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
no fix listed
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
python3@3.14.5-r0
3.14.7-r0
3
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python3@3.6.8-47.el8_6.2
0:3.6.8-78.el8_10
3
alpine/k8s:1.32.12048f8d9c8cc7
python3@3.12.12-r0
3.14.7-r0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
python3.11@3.11.2-6
no fix listed
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
python3@3.6.8-69.el8_10
0:3.6.8-78.el8_10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
2
homebridge/homebridge:latest77c685a40911
python3.12@3.12.3-1ubuntu0.16
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed
2
istio/kubectl:1.5.10dbb7726d1bf0
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
2
library/cassandra:3.11.65aa8400b4b3b
python2.7@2.7.17-1~18.04ubuntu1.1
no fix listed
2
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
2
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
no fix listed
2
library/rabbitmq:4.1.0-management935b3f84c1e4
python3.12@3.12.3-1ubuntu0.5
no fix listed
2
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
no fix listed
2
library/redmine:6.1.3-trixief474a901faec
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
python3.11@3.11.2-6+deb12u7
no fix listed
2
memgraph/memgraph:3.13.0a1dc375774ed
python3.12@3.12.3-1ubuntu0.16
no fix listed
2
minio/operator:v4.3.754393e03f3b2
python3@3.6.8-41.el8
0:3.6.8-78.el8_10
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.